Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0953.

The version of Adobe Photoshop installed on the remote Mac OS X host is prior to 15.2.4 (2014.2.4) or 16.1.2 (2015.1.2). It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code.

The version of Adobe Bridge installed on the remote Mac OS X host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code.

The version of Adobe Photoshop installed on the remote Windows host is prior to 15.2.4 (2014.2.4) or 16.1.2 (2015.1.2). It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code.

The version of Adobe Bridge installed on the remote Windows host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code.

ID	Name	Product	Family	Severity
88721	Adobe Photoshop CC < 15.2.4 / 16.1.2 Multiple Memory Corruption Vulnerabilities (APSB16-03) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
88720	Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
88719	Adobe Photoshop CC < 15.2.4 / 16.1.2 Multiple Memory Corruption Vulnerabilities (APSB16-03)	Nessus	Windows	critical
88718	Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03)	Nessus	Windows	critical

Detections

Analytics

CVE-2016-0952

critical

Tenable Plugins

critical

critical

critical

critical